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Question: 1 


You have an Oracle Cloud Infrastructure (OCI) load balancer distributing traffic via an evenly- 
weighted round robin policy to your back-end web servers. You notice that one of your web servers is 
receiving more traffic than other web servers. 

How can you resolve this to make sure traffic is evenly distributed across all back-end webservers? 


A. Disable cookie-based session persistence on your backend set. 

B. Change keep-alive setting between the load balancer and backend server. 
C. Disable SSL configuration associated with your backend set. 

D. Create separate listeners for each backend web server. 


Answer: D 


Explanation: 
Reference: 
https://docs.cloud.oracle.com/en-us/iaas/Content/Balance/Concepts/balanceoverview.htm 


Question: 2 


Which two are Regional resources in Oracle Cloud Infrastructure? (Choose two.) 


A. Ephemeral public IPs 
B. Compartments 

C. Compute images 

D. Dynamic groups 

E. Block volume backups 


Answer: BD 


Explanation: 
Reference: 
https://docs.cloud.oracle.com/en-us/iaas/Content/General/Concepts/regions.htm 


Question: 3 


An Oracle Cloud Infrastructure tenancy administrator is not able to delete a user in the tenancy. 
What can cause this issue? 


A. User has multi-factor authentication (MFA) enabled. 
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B. User is member of an Identity and Access Management (IAM) group. 
C. Users can be blocked but not deleted. 
D. User needs to be deleted from federation Identity Provider (IdP) before deleting from IAM. 


Answer: A 


Question: 4 


You are a system administrator of your company and you are asked to manage updates and patches 
across all your compute instances running Oracle Linux in Oracle Cloud Infrastructure (OCI). As part of 
your task, you need to apply all the latest kernel security updates to all instances. 

Which OCI service will allow you to complete this task? 


A. Resource Manager 
B. OS Management 
C. Storage Gateway 
D. Streaming 

E. Registry 


Answer: B 


Explanation: 
Reference: 


https://blogs.oracle.com/cloud-infrastructure/os-management-with-oracle-cloud-infrastructure 


Question: 5 


Which of the following statements is true about the Oracle Cloud Infrastructure (OCI) Object Storage 
serverside encryption? 


A. Encryption of data encryption keys with a master encryption key is optional. 

B. Customer-provided encryption keys are always stored in OCI Vault service. 

C. Encryption is enabled by default and cannot be turned off. 

D. Each object in a bucket is always encrypted with the same data encryption key. 


Answer: B 


Explanation: 
Reference: 
https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Tasks/usingyourencryptionkeys.htm 
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Question: 6 


You need to set up instance principals so that an application running on an instance can call Oracle 
Cloud Infrastructure (OCI) public services, without the need to configure user credentials. 

A developer in your team has already configured the application built using an OCI SDK to 
authenticate using the instance principals provider. 

Which is NOT a necessary step to complete this set up? 


A. Create a dynamic group with matching rules to specify which instances you want to allow to make 
API calls against services. 

B. Generate Auth Tokens to enable instances in the dynamic group to authenticate with APIs. 

C. Create a policy granting permissions to the dynamic group to access services in your compartment 
or tenancy. 

D. Deploy the application and the SDK to all the instances that belong to the dynamic group. 


Answer: D 


Explanation: 
Reference: 


https://blogs.oracle.com/cloud-infrastructure/announcing-instance-principals-for-identity- 


andaccess-management 


Question: 7 


You have been asked to create an Identity and Access Management (IAM) user that will authenticate 
to Oracle Cloud Infrastructure (OCI) API endpoints. This user must not be given credentials that 
would allow them to log into the OCI console. 

Which two authentication options can you use? (Choose two.) 


A. SSL certificate 

B. API signing key 

C. SSH key pair 

D. PEM Certificate file 
E. Auth token 


Answer: BE 


Explanation: 
Reference: 
https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/managingcredentials.htm 


Question: 8 


You have compartments C and D under the root compartment in your Oracle Cloud Infrastructure 


https://www.certkillers.net 


Questions & Answers PDF Page 5 


(OCI) tenancy; compartment C contains a sub-compartment also named D. You are trying to move 
this sub-compartment D to the parent compartment D like shown in the picture, but the move fails. 


What is the reason for this error? 


A. You need to move all the compartments in the hierarchy to the new parent compartment. 
B. You cannot move a subcompartment to another parent compartment. 

C. Both parent and child compartments cannot have the same name. 

D. Sub-compartment D needs to be empty before it can be moved. 


Answer: C 


Explanation: 

Reference: 
https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/managingcompartments.htm 
(restriction on moving compartments) 
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Question: 9 


Which two components cannot be deleted in your Oracle Cloud Infrastructure Virtual Cloud 
Network? (Choose two.) 


A. Service gateway 

B. Default security list 
C. Routing gateway 
D. Default route table 
E. Default subnet 


Answer: BD 


Explanation: 
Reference: 


https://www.oracle.com/a/ocom/docs/vcn-deployment-guide.pdf (4) 


Question: 10 


A financial firm is designing an application architecture for its online trading platform that must have 
high availability and fault tolerance. 

Their solutions architect configured the application to use an Oracle Cloud Infrastructure Object 
Storage bucket located in the US West (us-phoenix-1) region to store large amounts of financial dat 

a. The stored financial data in the bucket must not be affected even if there is an outage in one of the 
Availability Domains or a complete region. 

What should the architect do to avoid any costly service disruptions and ensure data durability? 

A. Create a new Object Storage bucket in another region and configure lifecycle policy to move data 
every 5 days. 

B. Create a lifecycle policy to regularly send data from Standard to Archive storage. 

C. Copy the Object Storage bucket to a block volume. 

D. Create a replication policy to send data to a different bucket in another OCI region. 


Answer: A 
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